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DETAILED ACTION 

1. Claims 1-6, 8-15, 18-19, 21, and 23-25 are pending. 
Claims 7,16,17,20 and 22 are cancelled by applicant. 

Continued Examination Under 37 CFR 1.114 

2. A request for continued examination under 37 CFR 1.114, including the 
fee set forth in 37 CFR 1.17(e), was filed in this application after final rejection. 
Since this application is eligible for continued examination under 37 CFR 

1.1 14, and the fee set forth in 37 CFR 1.17(e) has been timely paid, the finality 
of the previous Office action has been withdrawn pursuant to 37 CFR 1.1 14. 
Applicant's submission filed on 12/6/08 has been entered. 

Response to Arguments 

3. Applicant's arguments with respect to claims 1-6, 8-15, 18-19 have been 
considered but are moot in view of the new ground(s) of rejection. 

Regarding the argument on pg.6-7, traverses that claims 1 , 11, 19 requires an 
executable program or file is decrypted prior to execution by the processor. Claim 1 
merely recites a processor for decrypting the encrypted executable program and for 
executing the executable program. Claim 11 recites decrypting the executable 
programs with a software procedure. Claims 1 and 1 1 does not specifically limit or 
suggest the decryption is prior to the execution. Claim 19 merely recites decrypting the 
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encrypted executable file. An encrypted executable file has no bearing on a time frame 
or when it is to be executed whether it was executed prior or after decryption, for the 
claim broadly limits the file is able to be executed. Only claim 6 recites decrypting the 
encrypted executable program prior to execution of the executable program. In 
essence, Folmsbee discusses on col. 3, lines 8-44, decoding prior to execution where 
providing correct intermediate result in an instruction decoder that accepts instruction op 
codes in excess of a set of instruction op codes required for execution of a program. 
Further, Folmsbee discloses in order to allow the CPU to execute programs which are 
encrypted, the CPU also includes a programmable instruction decoder and for storing 
information specific to that particular CPU (col. 5, lines 18-23). This obviously suggests 
decryption occurs prior to the execution of a program/file to prevent the program/file 
from being executed which in turn is accessible to an attacker if the information 
provided is unable to decrypt the program/file (col.22, lines 28-32). There is no 
decrypted output of the software external of the CPU where this suggests execution is 
within the particular CPU that properly decrypts the encrypted program/file (col.22, lines 
57-61). Thus, read on the claimed invention for protecting executable programs 
comprising a decryption procedure stored in the data processing unit. All dependent 
claims are also rejected by virtue of their pendency. 

Regarding the argument on pg.8 for claim 22, examiner traverses that Folmsbee 
does not teach an executable is decrypted by a decryption procedure stored in a 
memory. Folmsbee discloses in order to allow the CPU to execute programs which are 
encrypted, the CPU also includes a programmable instruction decoder and for storing 



Application/ Control Number: 10/805,776 
Art Unit: 2435 



Page 4 



information specific to that particular CPU where memory stores used for specific 
decoding information (col. 5, lines 18-36). Therefore, reads on having a decryption 
procedure stored in a memory. All dependent claims are also rejected by virtue of their 
pendency. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

4. Claims 1-6, 8-15, and 18-19 are rejected under 35 U.S.C. 103(a) as being 

unpatentable over Folmsbee (US 7,225,322), and further in view of Srinivasan, et 

al. (US 6,240,183). 

As per claim 1: 

Folmsbee discloses a data processing unit for executing an encrypted software 
executable program, the data processing unit comprising: 

a processor for decrypting the encrypted executable program and for executing 
the executable program (col. 7, lines 2-12 and col.8, lines 23-26), the processor 
including an identifying number, the identifying number being accessible only by the 
processor; and (col.1, lines 58-60 and col. 14, lines 10-60) 
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a memory unit, the memory unit storing the decryption procedure (col. 5, lines 29- 
31 and col. 18, lines 42-52), the encrypted executable program being encrypted using at 
least a portion of the identifying number; (col.8, lines 35-40 and col. 22, lines 55-59) 

wherein, when the processor is to execute the executable program, the 
executable program is decrypted using the decryption procedure along with the 
identifying number, (col .5, lines 7-28 and col.9, lines 30-49) 

Folmsbee discloses the CPU (processor) includes serial number and having a 
plurality of memory stores (col. 5, lines 29-31 - i.e. RAM, EPROM, ROM) for storing the 
serial numbers (col. 13, lines 16-36). Folmsbee discusses the program is identified by a 
key and a serial number of the CPU, stored on the CPU (col.8, lines 37-40) which to 
provide verification of the authenticity (col.9, lines 35-37). However, Folmsbee did not 
specify the serial number (identifying number) being accessible only by the processor. 

Srinivasan, et al. teaches a secure processor assuring application software is 
executed securely and assuring only authorized software is executed (abstract). The 
secure processor maintains security information (col.1 1 , lines 55-59) such as the unique 
ID, code signatures or cryptographic hashes, and unique encryption/decryption keys as 
well as other information to the particular processor (col.4, lines 19-14). Srinivasan 
discloses the CPU memory interface receives memory access requests from the CPU 
and performs appropriated interface functions with the external memory (col.9, lines 45- 
62). Further, the CPU is allowed to access the secure boot code, execute its 
instructions, and read/write data using the security information (col. 13, lines 13-16). 
Whereby the CPU executes software and that the decryption keys from the read-only 
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secure data accessible only by the CPU while in secure mode (col. 13, lines 55-62). 
Thus, suggests only the authorized CPU is able to access security information (unique 
ID). 

Therefore, it would have been obvious for a person of ordinary skills in the art to 
combine the processor to access the unique ID of Srinivasan with the processor having 
the serial number of Folmsbee because this assures application software and 
multimedia content are only used on processors when the right to do so has been 
authorized without having to substantially alter the original application software and 
reduction in speed or other resources available to the application software (Srinivasan - 
col.1, lines 43-49 and 63-67 and col.2, lines 23-28). 

As per claim 2: see Folmsbee on col.5, lines 20-26; discussing data processing unit as 
recited in claim wherein the encrypted executable program is stored in the memory 
unit. 

As per claim 3: see Folmsbee on col. 15, lines 20-67 and Srinivasan on col. 3, lines 55- 
62; discussing the data processing unit as recited in claim 1 further comprising an 
external memory unit, wherein the encrypted executable program is stored in an 
external memory unit. 

As per claim 4: see Folmsbee on col.4, lines 47-48; discussing the data processing unit 
as recited in claim 1 wherein the identifying number is a serial number. 
As per claim 5: see Folmsbee on col.4, lines 46-65 and col. 8, lines 36-40; discussing 
the data processing unit as recited in claim 1 wherein the identifying number is 
associated with a plurality of data processing units. 
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As per claim 6: 

Folmsbee discloses a method for protecting software programs, the method 
comprising: 

providing a data processing unit with an identifying number (col.1, lines 58-60 
and col. 14, lines 10-60), the identifying number being accessible only by the processing 
unit; (col.4, lines 45-54 and col. 10, lines 35-40) 

encrypting a executable program external to the data processing unit (col. 15, 
lines 20-67) using at least a portion of the identifying number; and (col. 8, lines 35-40 
and col.1 8, lines 42-52) 

decrypting the encrypted executable program (col. 5, lines 29-31 and col. 22, lines 
55-59) prior for execution of the executable program by the data processing unit (col. 7, 
lines 2-12 and col. 8, lines 23-26) using the identifying number and a decryption 
procedure in the processing unit. (col. 5, lines 7-28 and col. 9, lines 30-49) 

Folmsbee discloses the CPU (processor) includes serial number and having a 
plurality of memory stores (col. 5, lines 29-31 - i.e. RAM, EPROM, ROM) for storing the 
serial numbers (col.1 3, lines 16-36). Folmsbee discusses the program is identified by a 
key and a serial number of the CPU, stored on the CPU (col. 8, lines 37-40) which to 
provide verification of the authenticity (col.9, lines 35-37). However, Folmsbee did not 
specify the serial number (identifying number) being accessible only by the processor. 

Srinivasan, et al. teaches a secure processor assuring application software is 
executed securely and assuring only authorized software is executed (abstract). The 
secure processor maintains security information (col.1 1 , lines 55-59) such as the unique 
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ID, code signatures or cryptographic hashes, and unique encryption/decryption keys as 
well as other information to the particular processor (col.4, lines 19-14). Srinivasan 
discloses the CPU memory interface receives memory access requests from the CPU 
and performs appropriated interface functions with the external memory (col. 9, lines 45- 
62). Further, the CPU is allowed to access the secure boot code, execute its 
instructions, and read/write data using the security information (col. 13, lines 13-16). 
Whereby the CPU executes software and that the decryption keys from the read-only 
secure data accessible only by the CPU while in secure mode (col. 13, lines 55-62). 
Thus, suggests only the authorized CPU is able to access security information (unique 
ID). 

Therefore, it would have been obvious for a person of ordinary skills in the art to 
combine the processor to access the unique ID of Srinivasan with the processor having 
the serial number of Folmsbee because this assures application software and 
multimedia content are only used on processors when the right to do so has been 
authorized without having to substantially alter the original application software and 
reduction in speed or other resources available to the application software (Srinivasan - 
col.1, lines 43-49 and 63-67 and col.2, lines 23-28). 
As per claim 7: Cancelled 

As per claim 8: see Folmsbee on col.4, lines 47-48; discussing the method as recited in 
claim 6 wherein the identifying number is a serial number for the data processing unit. 
As per claim 9: see Folmsbee on col. 15, lines 20-67 and Srinivasan on col. 3, lines 55- 
62; discussing the method as recited in claim 6 wherein the encrypted executable 
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program is stored external to the data processing unit. 

As per claim 10: see Folmsbee on col.4, lines 46-65 and col. 8, lines 36-40; discussing 
the method as recited in claim 6 wherein the encrypted executable program is stored in 
data processing unit. 
As per claim 11: 

Folmsbee discloses a data processing system, the system comprising: 

a host data processing unit (col.1, lines 58-60 and col. 14, lines 10-60) the host 
processing unit encrypting executable program using at least a portion of an identifying 
number; and (col. 8, lines 35-40 and col. 18, lines 42-52) 

a target data processing unit, the target data processing unit decrypting 
executable program (col. 7, lines 2-12 and col.8, lines 23-26) with a software procedure 
using a decryption key based on the identifying number, (col. 5, lines 7-31 and col. 9, 
lines 30-49 and col.22, lines 55-59) 

Folmsbee discloses the CPU (processor) includes serial number and having a 
plurality of memory stores (col. 5, lines 29-31 - i.e. RAM, EPROM, ROM) for storing the 
serial numbers (col. 13, lines 16-36). Folmsbee discusses the program is identified by a 
key and a serial number of the CPU, stored on the CPU (col.8, lines 37-40) which to 
provide verification of the authenticity (col.9, lines 35-37). However, Folmsbee did not 
specify the serial number (identifying number) being accessible only by the processor. 

Srinivasan, et al. teaches a secure processor assuring application software is 
executed securely and assuring only authorized software is executed (abstract). The 
secure processor maintains security information (col.1 1 , lines 55-59) such as the unique 
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ID, code signatures or cryptographic hashes, and unique encryption/decryption keys as 
well as other information to the particular processor (col.4, lines 19-14). Srinivasan 
discloses the CPU memory interface receives memory access requests from the CPU 
and performs appropriated interface functions with the external memory (col. 9, lines 45- 
62). Further, the CPU is allowed to access the secure boot code, execute its 
instructions, and read/write data using the security information (col. 13, lines 13-16). 
Whereby the CPU executes software and that the decryption keys from the read-only 
secure data accessible only by the CPU while in secure mode (col. 13, lines 55-62). 
Thus, suggests only the authorized CPU is able to access security information (unique 
ID). 

Therefore, it would have been obvious for a person of ordinary skills in the art to 
combine the processor to access the unique ID of Srinivasan with the processor having 
the serial number of Folmsbee because this assures application software and 
multimedia content are only used on processors when the right to do so has been 
authorized without having to substantially alter the original application software and 
reduction in speed or other resources available to the application software (Srinivasan - 
col.1, lines 43-49 and 63-67 and col.2, lines 23-28). 

As per claim 12: see Folmsbee on col.4, lines 47-48; discussing the system as recited in 
claim 1 1 wherein the identifying number is a serial number for the target data process 
As per claim 13: Folmsbee on col. 15, lines 20-67 and Srinivasan on col. 3, lines 55-62; 
discussing the system as recited in claim 11 further comprising a memory unit external 
to the target data processing unit, the memory unit storing encrypted executable 
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program unit. 

As per claim 14: see Folmsbee on col. 5, lines 20-26 and col. 10, lines 5-29; discussing 
the system as recited in claim 1 1 further comprising a memory unit in the target data 
processing unit, the memory unit storing encrypted executable programs prior to 
decryption. 

As per claim 1 5: see Folmsbee on col. 7, lines 8-1 1 and col.1 9, lines 21 -40; discussing 
the system as recited in claim 1 1 wherein an encrypted program is decrypted as an 
entity or on the fly prior to execution of the executable program by the target data 
processing unit. 

As per claims 16-17: Cancelled. 

As per claim 18: see Folmsbee on col. 5, lines 20-26 and col. 10, lines 5-29; discussing 
the system as recited in claim 15 wherein decrypted portions of the executable program 
are stored in a protected memory unit accessible to only the target data processing unit. 
As per claim 19: 

Folmsbee discloses a method for protecting an execution of an executable file, 
the method comprising: 

providing a target processor with an identifying/serial number accessible only to 
the target processor; (col.1, lines 58-60 and col. 14, lines 10-60) 

encrypting the executable file using at least a portion of the identifying/serial 
number; (col.8, lines 35-40 and col.1 8, lines 42-52) 

applying the encrypted executable file to the target processor; (col. 7, lines 2-12 
and col.8, lines 23-26) 
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decrypting the encrypted executable file using a decryption procedure stored in 
the target processor and the identifying/serial number, (col. 5, lines 7-28 and col. 9, lines 
30-49) 

Folmsbee discloses the CPU (processor) includes serial number and having a 
plurality of memory stores (col. 5, lines 29-31 - i.e. RAM, EPROM, ROM) for storing the 
serial numbers (col. 13, lines 16-36). Folmsbee discusses the program is identified by a 
key and a serial number of the CPU, stored on the CPU (col. 8, lines 37-40) which to 
provide verification of the authenticity (col.9, lines 35-37). However, Folmsbee did not 
specify the serial number (identifying number) being accessible only by the processor. 

Srinivasan, et al. teaches a secure processor assuring application software is 
executed securely and assuring only authorized software is executed (abstract). The 
secure processor maintains security information (col.1 1 , lines 55-59) such as the unique 
ID, code signatures or cryptographic hashes, and unique encryption/decryption keys as 
well as other information to the particular processor (col.4, lines 19-14). Srinivasan 
discloses the CPU memory interface receives memory access requests from the CPU 
and performs appropriated interface functions with the external memory (col.9, lines 45- 
62). Further, the CPU is allowed to access the secure boot code, execute its 
instructions, and read/write data using the security information (col. 13, lines 13-16). 
Whereby the CPU executes software and that the decryption keys from the read-only 
secure data accessible only by the CPU while in secure mode (col. 13, lines 55-62). 
Thus, suggests only the authorized CPU is able to access security information (unique 
ID). 



Application/ Control Number: 10/805,776 
Art Unit: 2435 



Page 13 



Therefore, it would have been obvious for a person of ordinary skills in the art to 
combine the processor to access the unique ID of Srinivasan with the processor having 
the serial number of Folmsbee because this assures application software and 
multimedia content are only used on processors when the right to do so has been 
authorized without having to substantially alter the original application software and 
reduction in speed or other resources available to the application software (Srinivasan - 
col.1, lines 43-49 and 63-67 and col.2, lines 23-28). 
As per claim 20: Cancelled. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

5. Claims 21 and 23-25 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Folmsbee (US 7,225,322), and further in view of Hejna, et al. 
(US 5,287,508). 
As per claim 21: 

Folmsbee discloses an apparatus for secure transfer of software files, the 
apparatus comprising: 
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a first processor, the first processor having program for encrypting an executable 
file (col. 8, lines 35-40 and col. 18, lines 42-52) using an identifying/serial number; and 
(col.1, lines 58-60 and col. 14, lines 10-60) 

a second processor, the second processor having a decryption procedure stored 
in a memory coupled to the second processor for decrypting the executable file using at 
least a portion of thejdentifying/serial number stored in the second processor, the 
stored identifying/serial number being accessible only to the second processor; (col. 7, 
lines 2-12 and col.9, lines 30-49) 

Folmsbee suggests each CPU could be provided with different key (col. 10, lines 
45-54) which is individual keys for individual CPUs (col. 22, lines 50-61) identified by 
serial numbers (col.1, lines 58-62) and wherein the first processor encrypts the software 
file using a copy of the at least a portion of the identifying/serial number, (col. 8, lines 35- 
40 and col. 22, lines 55-59). However, Folmsbee did not clearly discuss multiple 
processors such as the claimed first processor and a second processor. 

Hejna, et al. discloses improving the efficiency of process scheduling in a 
multiprocess system by including plurality of processors and schedules processes 
according to the priority of the process (col.1, lines 7-10 and col. 2, lines 50-67). Hejna 
discloses a multiprocessor system in which memory is shared by all processors can 
execute different process concurrently or can execute different threads (from one or 
multiple processes) concurrently (col.7, line 67 - col. 8, line 16). Thus, make use of 
several processors to speed execution of the processes (col. 8, lines 38-45). 
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Therefore it would have been obvious for a person of ordinary skills in the art to 
combine the teaching of Folmsbee with Hejna teaching multiple processors because 
making use of several processors can execute concurrently and to speed execution of 
the processes whereby improving the efficiency of process scheduling in a multiprocess 
system (Hejna on col.1, lines 7-10 and col.8, lines 38-45). 
As per claim 22: Cancelled 

As per claim 23: see Folmsbee on col.4, lines 62-67 and col. 9, lines 35-48; discussing 
the apparatus as recited in claim 21 wherein the at least a portion of the 
identifying/serial number is accessed by the first processor based on an indicia of the 
second processor. 

As per claim 24: see Folmsbee on col.7, lines 8-11; discussing the apparatus as 
recited in claim 21 wherein an encrypted executable file is stored in an unsecured 
storage unit. 

As per claim 25: see Folmsbee on col. 19, lines 21-40 and col. 22, lines 55-59; 
discussing the apparatus as recited in claim 24 wherein the encrypted executable file is 
stored in the unsecured storage unit prior to decryption. 

Conclusion 

Any inquiry concerning this communication or earlier communications 
from the examiner should be directed to Leynna T. Truvan whose telephone 
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number is (571) 272-3851. The examiner can normally be reached on Monday 
- Thursday (7:00 - 5:00PM). 

If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Kim Vu can be reached on (571) 272-3859. The fax 
phone number for the organization where this application or proceeding is 
assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from 
the Patent Application Information Retrieval (PAIR) system. Status information 
for published applications may be obtained from either Private PAIR or Public 
PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see 
http:/ / pair-direct.uspto.gov. Should you have questions on access to the 
Private PAIR system, contact the Electronic Business Center (EBC) at 866-217- 
9197 (toll-free). If you would like assistance from a USPTO Customer Service 
Representative or access to the automated information system, call 800-786- 
9199 (IN USA OR CANADA) or 571-272-1000. 

/L. T. T./ 

Examiner, Art Unit 2435 
/Kimyen Vu/ 

Supervisory Patent Examiner, Art Unit 2435 



